CVE-2020-21057

Name of the Vulnerable Software and Affected Versions: FusionPBX version 4.5.7

Description: A Directory Traversal issue allows a remote malicious user to delete folders on the system. This is achieved by exploiting the folder variable in the "/app/edit/folderdelete.php" endpoint.

Recommendations: For FusionPBX version 4.5.7, consider restricting access to the "/app/edit/folderdelete.php" endpoint until a patch is available. As a temporary workaround, avoid using the folder variable in this endpoint to minimize the risk of exploitation.